Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A passkey is a password replacement: a cryptographic credential for a specific website or app that you unlock on your device with a PIN, fingerprint, face scan, or another local method. The site receives proof that the credential was unlocked, not your biometric data. Because the passkey is bound to the site or app it was created for, it is designed to resist ordinary phishing attempts.
What a passkey replaces
Passwords are shared secrets: you type one into a site, and the service checks it. A passkey instead uses a cryptographic key pair. The service keeps a public key associated with your account, while the private key stays with your authenticator, such as a phone, computer, or security key. The private key proves you can access the account without being sent to the website.
The FIDO Alliance describes passkeys as “a password replacement technology.” It also says they are “resistant to phishing, are always strong, and are designed so that there are no shared secrets.” Those are the Alliance’s statements about the technology; they do not mean that every part of an account’s security or recovery process is automatically protected.
How passkey sign-in works
- Create the passkey. When a website or app offers passkey setup, your device or passkey provider creates a credential associated with that account.
- Start sign-in. The service asks the registered authenticator to prove that it has the credential for the account.
- Unlock locally. You approve the request using your device’s supported unlock method, such as a PIN or biometric check.
- Send cryptographic proof. The authenticator uses its private key to answer the service’s request. The service verifies the proof using the public key it has on file.
FIDO2 is the common name for WebAuthn and CTAP working together. WebAuthn provides the browser interface websites use; apps can use platform FIDO APIs. CTAP supports communication with authenticators, including some cross-device sign-ins with a nearby phone. The exact experience depends on the operating system, browser, app, and service. See the FIDO User Authentication Specifications.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Why passkeys resist phishing
A passkey is associated with the identity of the site or app where it was registered. A lookalike site should not be able to request that site’s passkey and use it to sign you in. Apple, Google, and FIDO describe this binding as the basis of passkey phishing resistance. See the FIDO Alliance passkeys overview, Apple’s Passkeys Overview, and Google’s passkeys documentation.
When you use a biometric, the check takes place locally on your device. The website is not sent your face or fingerprint; it receives an indication that local verification succeeded. A passkey is not your biometric stored at every website.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Phishing resistance applies to presentation of the credential, not every way an account can be compromised. Account recovery, a compromised device, and the service’s own security practices still matter.
Synced and device-bound passkeys
Passkeys can be stored and made available in different ways. The choice affects convenience, recovery, and how tightly the credential is kept to a particular device.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
| Type | How it works | Practical trade-off |
|---|---|---|
| Synced passkey | A passkey provider backs up the credential and makes it available on your other devices. Google says passkeys are encrypted on the device before syncing. | Convenient when adding or replacing devices; access depends in part on the provider’s account and recovery arrangements. |
| Device-bound passkey | The credential remains tied to one device or security key rather than syncing. | Can meet a strict device-boundary requirement, but losing access to the device can also mean losing access to that credential. |
Microsoft Entra recommends device-bound passkeys when keeping credentials within a device boundary is a hard requirement. The right choice depends on your needs and on what the account supports. See Microsoft’s Passkey FAQs for Microsoft Entra ID.
Using a phone or security key on another device
You do not always need the passkey on the computer where you began signing in. Some sign-in flows let you use a nearby phone or a security key to approve the request. FIDO describes cross-device sign-in using CTAP; Bluetooth Low Energy can be used to verify that the devices are physically near each other. The steps and availability vary by operating system, browser, and service.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Plan for recovery before you need it
Before relying on a device-bound passkey, check the account’s settings for a way to register another passkey or a separate recovery method. A compatible FIDO2 security key can be a separate device-bound credential and may provide another way into an account if you lose access to the devices holding your synced passkeys. It is an optional accessory, not a requirement for using passkeys, and neither every account nor every device supports every key.
- Confirm whether the service lets you register more than one passkey.
- Check which recovery methods the account offers and keep them current.
- If considering a hardware security key, verify that the service and your devices support it before depending on it.
FIDO’s passkeys overview covers passkey types, cross-device sign-in, and security-key use.
Quick Recap
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
